View Single Post
  #14 (permalink)  
Old 2006-08-15
dean7711 dean7711 is offline
Member
 
Join Date: 2006-06-03
Posts: 33
Rep Power: 0
dean7711 has an average reputation (10+)
Default Re: Dont make the mistake I made with CCSA NGX

QUESTION NO: 77
You are a Security Administrator configuring Static NAT on an internal host-node
object. You clear the box "Translate destination on client side", accessed from
Global Properties > NAT settings > Automatic NAT. Assuming all other Global
Properties NAT settings are selected, what else must be configured for automatic
Static NAT to work?
A. The NAT IP address must be added to the anti-spoofing group of the external
Gateway interface
B. Two address-translation rules in the Rule Base
C. No extra configuring needed
D. A proxy ARP entry, to ensure packets destined for the public IP address will reach the
Security Gateway's external interface
E. A static route, to ensure packets destined for the public NAT IP address will reach the
Gateway's internal interface
-------------------------------------

What do you guys reckon? Testking Says C a collegue that passed with 80% reckons E and I am thinking B.

What do you guys think and why?
Reply With Quote